Why a MONAI Model Bundle Deserves a Software Review
A model bundle, shared cache or medical-imaging data file can cross from content into code when a pipeline uses unsafe Python loading paths.
Healthcare Security
A Familiar Phone Number Helped Intruders Into Astrana Health
Astrana Health declared a material cyber incident after callers impersonated staff, spoofed its main number and reached company systems.
A Mirth Connect Login Could Turn Its Own Database Into a Public Download
A researcher exported Mirth Connect's configuration database into a public web folder in a controlled test. Two separate flaws reach exposed message channels without a login.
One Contractor Session Exposed Data Tied to 4.1 Million People
One compromised contractor session opened cloud applications, patient systems and external health-record portals. HHS says the AdaptHealth breach affected 4,115,802 people.
The Vendor Credentials Opened One API. Patient Social Security Numbers Left Through It.
The attacker did not need broad network access. Veradigm says credentials stolen from a third-party vendor were enough to copy patient data through one customer-service API.
Boston Scientific Could Not Process or Ship Orders After a Global Cyberattack.
A cybersecurity incident disrupted Boston Scientific's global operations and business applications used to process and ship orders. The company has not provided a restoration timetable.
Nutex Knows Data Left the Network. It Still Cannot Say Whose Data Was Taken.
Nutex Health has confirmed that an unauthorised party accessed its network and exfiltrated information from company servers. The healthcare operator knows that data left the environment. It does not yet know, or has not publicly disclosed, whether the stolen material…
The Outage Lasted Eight Hours. The Patient Exposure Reached 3.75 Million.
CareCloud first described an eight-hour disruption affecting one of six electronic health record environments. The same incident is now listed as affecting 3,756,469 people.
MyDr May Have Exposed Data on Half of Poland. The Concentration Risk Is the Bigger Story.
MyDr cannot yet confirm the breach scope, while officials cite nearly 19 million people. The platform concentration risk is already clear.